Bitcoin Ransomware Takes Down 100 Romanian Hospitals Offline, Hackers Demand 3.5BTC

Bitcoin Ransomware Romania
Ad Disclosure
Ad Disclosure

We believe in full transparency with our readers. Some of our content includes affiliate links, and we may earn a commission through these partnerships. However, this potential compensation never influences our analysis, opinions, or reviews. Our editorial content is created independently of our marketing partnerships, and our ratings are based solely on our established evaluation criteria. Read More
Last updated:
Ad Disclosure
Ad Disclosure

We believe in full transparency with our readers. Some of our content includes affiliate links, and we may earn a commission through these partnerships. However, this potential compensation never influences our analysis, opinions, or reviews. Our editorial content is created independently of our marketing partnerships, and our ratings are based solely on our established evaluation criteria. Read More
Author
Sujha Sundararajan
Author Categories
About Author

Sujha has been recognised as 🟣 Women In Crypto 2024 🟣 by BeInCrypto for her leadership in crypto journalism.

Last updated:
Why Trust Cryptonews
Cryptonews has covered the cryptocurrency industry topics since 2017, aiming to provide informative insights to our readers. Our journalists and analysts have extensive experience in market analysis and blockchain technologies. We strive to maintain high editorial standards, focusing on factual accuracy and balanced reporting across all areas - from cryptocurrencies and blockchain projects to industry events, products, and technological developments. Our ongoing presence in the industry reflects our commitment to delivering relevant information in the evolving world of digital assets. Read more about Cryptonews
Ad DisclosureWe believe in full transparency with our readers. Some of our content includes affiliate links, and we may earn a commission through these partnerships. Read more

More than 100 hospitals in Romania were affected by a crypto ransomware attack on Tuesday, the National Cyber Security Directorate (DNSC) confirmed. The unidentified perpetrators have demanded 3.5 Bitcoin (BTC), or about $180,000, to decrypt the data.

The ransomware took down over 100 hospitals, affecting their IT systems and encrypting data, forcing the hospitals to operate offline.

Per a recent update from the DNSC, 25 hospitals in Romania using Hipocrate Information System (HIS) are directly affected by the attack. “As a result of the attack, the system is down, files and databases are encrypted,” the Ministry of Health noted.

“The incident is under investigation by IT specialists, including cyber security experts from the National Cyber ​​Security Directorate, and resumption possibilities are being assessed,” the Ministry added. However, it did not specify whether the authorities are ready to pay the ransom in Bitcoin, as demanded by attackers.

Dubbed ‘Backmydata’, the ransomware is a variant of Phobos malware family, that are distributed via hacked Remote Desktop (RDP) connections. The ransom note informs victim about the severity of the situation by threatening to sell confidential data if negotiations fail. The note also asserts that data can be returned only when the ransom is paid in digital assets.

Furthermore, hospitals in Romania are told to keep an eye on ransom demands to ensure evidence is preserved.

Bitcoin Demands in Ransomware

This isn’t a new case where attackers have demanded Bitcoin ransom payment. The Backmydata has similarities with the infamous “WannaCry” attack in May 2017 on the UK’s National Health Service (NHS).

In 2021, Russian DarkSide Group attacked the US Colonial Pipeline, demanding a ransom of $5 million worth in crypto assets. Later, the US Department of Justice has recovered $2.3 million in Bitcoin from the DarkSide (approximately 63.7BTC at that time).

Additionally, a recent report from Chainalysis noted that ransomware payments hit a staggering $1 billion in 2023. Notable victims included household names like the BBC and British Airways, and other high-profile institutions.

More Articles

Podcast
Gregg Bell, SVP of HBAR Foundation, on Hedera, Creating New Investment Vehicles, Tokenization, and Creating the Trust Layer of the Internet | Ep. 408
2025-02-07 10:48:44
Ethereum News
Ether Outflows from Derivatives Exchanges Hit Highest Level Since August 2023, Signaling Bullish Trend
Ruholamin Haqshanas
Ruholamin Haqshanas
2025-02-07 08:51:10
Crypto News in numbers
editors
Authors List + 66 More
2M+
Active Monthly Users Around the World
250+
Guides and Reviews Articles
8
Years on the Market
70
International Team Authors